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In this article, I discuss material which is related to the recent proof of Fermat's Last 
Theorem: elliptic curves, modular forms, Galois representations and their deforma- 
tions, Frey's construction, and the conjectures of Serre and of Taniyama-Shimura. 



1. Introduction 

This article is a revised version of the notes which were distributed at my Progress 
in Mathematics lecture at the August, 1994 Minneapolis Mathfest. When I was 
first approached in 1993 by the Progress in Mathematics committee, I was asked 
to discuss "the mathematics behind Andrew Wiles's solution of the Fermat conjec- 
ture." As the reader is no doubt aware, Wiles had announced in a series of lectures 
at the Isaac Newton Institute for Mathematical Sciences that he was able to prove 
for semistable elliptic curves the conjecture of Shimura and Taniyama to the effect 
that all elliptic curves over Q are "modular" (i.e., attached to modular forms in 
a sense which will be explained below). Fermat's Last Theorem follows from this 
result, together with a theorem that I proved seven years ago [62]. 

At the time of the Mathfest, however, a gap which had appeared in Wiles's work 
had not yet been repaired (see [33]) — Fermat's "Theorem" was still a conjecture. 
Nevertheless, it was readily apparent that the methods introduced by Wiles were 
significant and deserving of attention. Most notably, these methods had been used 
to construct for the first time an infinite set £ of modular elliptic curves over Q 
with the following property: if E\ and E2 are elements of S, then E\ and E2 
are non-isomorphic even when viewed as elliptic curves over the complex field C 
(see [69]). In my lecture at the Mathfest, I stressed this achievement of Wiles and 
discussed the analogy between the Taniyama-Shimura conjecture and conjectures 
of Serre [75] about two-dimensional Galois representations. 

As I began to revise these notes, I found that the situation had changed dramat- 
ically for the better. Wiles announced in October, 1994 that the bound he sought 
in his original proof could be obtained by a method which circumvented the Euler 
system construction [34]. This method arose from an observation that Wiles made 
early in his investigation: the required upper bound would follow from a proof that 
certain Hecke algebras are complete intersection rings. This statement about Hecke 
algebras is the main theorem of an article written jointly by Richard Taylor and 
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Andrew Wiles [88]; these authors announced their result at the same time that 
Wiles disseminated a revised version of his original manuscript [92] . 

It is premature to undertake a detailed analysis of the results of Wiles and Taylor- 
Wiles. The aim of this survey is more modest: to present an introduction to the 
circle of ideas which form the background for these results. Because of the intense 
publicity surrounding Fermat's Last Theorem, a good deal of the material I have 
chosen has been discussed in news and expository articles which were written in 
connection with Wiles's 1993 announcement. Among these are the author's news 
item in the Notices [65] and his article with Brian Hayes in American Scientist [30] , 
two pieces in the American Mathematical Monthly [13, 28], the report by K. Rubin 
and A. Silverberg in this Bulletin [68], a long survey by H. Darmon [14], an ele- 
mentary formulation of the Langlands program by A. Ash and R. Gross [1], and an 
article for undergraduates and their teachers by N. Boston [6]. Books containing 
articles related to Fermat's Last Theorem are soon to appear [10, 55]. Furthermore, 
two videotapes related to Fermat have been in circulation for some time: a 1993 
lecture by the author is available from the AMS [66] , and the Mathematical Sciences 
Research Institute has been distributing a videotape based on the July, 1993 "Fer- 
mat Fest" which was organized by the MSRI and the San Francisco Exploratorium. 
Readers may also consult material available by gopher from e-math . ams . org. 

In view of the burgeoning literature in this subject, I imagined these notes mostly 
as a somewhat biased guide to reference works and expository articles. In the end, 
what I have written might best be characterized as an abbreviated survey with a 
disproportionately large list of references. 



We begin by summarizing some background material concerning modular forms. 
Among reference books in the subject, one might cite [36], [53], and [80]. Also, 
several books on elliptic curves contain substantial material on modular forms; 
in particular, Knapp's book [35] has been recommended to the author as a good 
source for an overview of the Eichler-Shimura theory relating elliptic curves to 
certain modular forms. For a first introduction to modular forms, a fine starting 
point is [73, Ch. VII]. 

The modular forms to be considered are "cusp forms of weight two on T (N) : n 
for some integer N > 1. Here, T (N) is the group of integer matrices with de- 
terminant 1 which are upper-triangular mod N. A cusp form on this group is, in 
particular, a holomorphic function on the upper half-plane 7i consisting of complex 
numbers with positive imaginary part. 

These functions are usually presented as converging Fourier series J2^Li a nQ n : 
where q := e 27Tlz . For the forms which most interest us, the complex numbers a n 
are algebraic integers; frequently they are even ordinary integers. 

The weight- two cusp forms on Fq(N) are holomorphic functions f(z) on the 
complex upper half-plane H. On requires principally that f(z) dz be invariant 
under T (N), i.e., that f(z) satisfy the functional equation 
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G T (N). (In particular, one has f(z + b) = f(z) for all integers b.) 
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In addition to the holomorphy and the functional equation, one imposes subsidiary 
conditions at infinity [80, Ch. 2]. 

The group To(N) acts on TL by fractional linear transformations, with ^ ^ 

acting as 

az + b 

Z H-> ;. 

cz + a 

The invariance of f(z) dz means that f(z) dz arises by pullback from a differential on 
the quotient Yq(N) := Tq(N)\H. This quotient is a non-compact Riemann surface 
with a standard compactification, known as Xq(N). The complement of Yq(N) 
in X (N) is a finite set, the set of cusps of Xq(N). The conditions on infinity 
satisfied by a cusp form require the differential on Y (N) associated to f(z) to 
extend to X (N). This means simply that f(z) is required to vanish at the cusps. 

Let us identify the space S(N) of weight-two cusp forms on To(N) with the 
space of holomorphic differentials on the Riemann surface Xq(N). Then S(N) 
has finite dimension: dim S'(iV) is the genus of the curve Xq(N). This integer 
may be calculated easily via the Riemann-Hurwitz formula (applied to the cover- 
ing X (N) — > -X"o(l) which corresponds to the inclusion of T (N) in r (l)). For 
example, dimS(iV) is zero for iV < 10 and is one for N = 11. (See [80, Ch. 2].) 

In order to present an example of a non-zero cusp form, we will exhibit a non- 
zero element of the 1-dimensional space S'(ll). Namely, consider the formal power 
series with integral coefficients Yl o- n X n which is defined by the identity 

oo oo 
X Y[ (1 - X m ) 2 (l - X llm f = a nX U . 
m=l n=l 

It can be shown that the holomorphic function Yl a nQ n (with q = e 27riz ) is a cusp 
form h of weight two on ro(ll), i.e., a generator of the 1-dimensional space £(11), 
cf. [80, Example 2.28]. (One has h(z) = rj (z) 2 i] (11 z) 2 , where rj(z), the Dedekind 
?7-function, is the standard example of a modular form of weight 1/2.) 

For each integer n > 1, the nth Hecke operator on S(N) is an endomorphism 
T n of S(N), whose action is generally written on the right: / h- > f\T n . The various 
T n commute with each other and are interrelated by identities which express a 
given T n in terms of the Hecke operators indexed by the prime factors of n. If p is a 
prime, the operator T p is defined as a composite (3°a, where a: S(N) — > S(Np) and 
(3: S(Np) — > S(N) are standard homomorphisms, known as "degeneracy maps." In 
terms of Fourier coefficients, T p is given by the following rules: If p is not a divisor 
of N and f = a n q n , then f\T p has the Fourier expansion 



pn 

n=l n=l 



If p divides N, then f\T p is given by Xl^Li a npQ n - The T n have a strong tendency 
to be diagonalizable on S(N): for n prime to N, T n is self-adjoint with respect to 
the Petersson pairing on S{N), and is therefore semisimple [80, §3.5]. 

The elements of S (N) having special arithmetic interest are the normalized eigen- 
forms in S(N); these are the non-zero cusp forms / = ^2a n q n which are eigen- 
vectors for all the T n and which satisfy the normalizing condition a± = 1. (The 
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latter condition is imposed mostly for convenience, since an arbitrary eigenform is 
a multiple of a normalized one.) If / is such an eigenform, its Fourier coefficients 
and its eigenvalues coincide: one has f\T n = a n f for all n > 1. The normalized 
eigenforms are "arithmetic" because the a n belong to the realm of algebraic number 
theory. In fact, if / is a normalized eigenform, then the subfield of C generated by 
the a n is a finite (algebraic) extension E of Q in C, and the elements a n of E are 
algebraic integers (see [80, Th. 3.52] or [16, Prop. 2.7]). 

It is a mildly complicating fact that the normalized eigenforms in S(N) do not 
always form a basis of S(N). In other words, the commuting operators T n are not 
necessarily all diagonalizable. This problem, which arises from those n which have 
a common factor with N, can be repaired by the introduction of newforms [2]. 
Briefly, a newform is a normalized eigenform / = ^ a n q n for which the space 



contains only / and its multiples. Atkin and Lehner showed in 1970 that S(N) 
has a basis built out of suitable transforms of the newforms in the spaces S(M), 
where M runs over the positive divisors of N. Namely, for each M, there are 
natural embeddings of the space S(M) into S(N) which are indexed by the positive 
divisors of N/M. Namely, to each divisor d of N/M is associated the embedding 
dd - S(M) <— > S(N) which sends Y2 a nQ n to the series Y2 a nQ nd - The embeddings 
5d are degeneracy mappings; one such mapping was introduced briefly above in 
connection with the definition of the pth Hecke operator T p . With the help of these 
degeneracy mappings, the full space S(N) may be reconstructed purely in terms of 
the newforms in the spaces S(M) with M dividing N. Specifically, let S(M) new be 
the subspace of S(M) spanned by its newforms. Then 



We conclude this discussion with the remark that the work of Atkin and Lehner 
was generalized by T. Miyake [52] in the setting of automorphic forms on GL(2) 
and then by W. Li [42] in the setting of classical modular forms. 



We next introduce some foundational concepts pertaining to elliptic curves. For 
an in-depth treatment of these concepts, the reader may consult the large number 
of textbooks and monographs which focus on elliptic curves. (As was indicated 
above, some of these books discuss modular forms as well.) Rather than list these 
references here, we refer the reader to the bibliography of a recent book review 
written by W. R. Hearst III and the author [31]. One book which has appeared 
since that review was written is the recent "Advanced Topics in the Arithmetic of 
Elliptic Curves" by J. H. Silverman [85]. 

Elliptic curves are distinguished by the fact that they are simultaneously curves, 
i.e., varieties of dimension 1, and abelian varieties, projective varieties which are 
endowed with a group law. The definition is very simple: an elliptic curve over a 
field k is a projective non-singular curve A of genus 1 over k which is furnished 
with a distinguished rational point O. An elliptic curve is thus a pair (A,0); an 
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isomorphism between two pairs (A, O) and (A' , O') is an isomorphism A ^ A' 
which maps O to O'. By convention, one usually omits explicit mention of the 
point O and refers simply to an elliptic curve A over k. 

One obtains elliptic curves from 5-tuples of elements of k: to (a\, 012, «4, ckq) 
one associates the projective curve whose affine equation is the generalized Weier- 
strafi equation 

y 2 + a.\xy + a^y = x 3 + a^x 2 + a±x + olq. 

This curve has genus 1 if it is non-singular; the non-singularity is detected by 
the non-vanishing of the discriminant of the equation. (The discriminant is a 
polynomial in the en which will not be reproduced here; it can be found, for instance, 
on page 36 of [86].) A short calculation shows that the plane curve with the 
indicated equation has exactly one point which does not lie on the affine plane; we 
take this point to be the distinguished point O. Using the Riemann-Roch theorem, 
one checks that every elliptic curve over k is isomorphic to one obtained by this 
process. (See, e.g., [76, Ch. II] for a discussion of the Riemann-Roch theorem and 
[84, Ch. Ill, §3] for a proof that elliptic curves are given by generalized Weierstrafi 
equations.) 

As we have suggested, an elliptic curve A over k may be viewed as a commutative 
algebraic group over k. Concretely, suppose that one has chosen a Weierstrafi 
equation for A as above. For each field K containing k, let A{K) be the subset 
of the projective plane over K which is defined by the Weierstrafi equation. This 
set is endowed with a classical group law, often known as the "chord and tangent 
operation." In this law, O is the identity element of A(K), and three distinct 
elements of A(K) sum to O if and only if they are collinear. The composition 
law on A(K) can be described explicitly in terms of coordinates by a family of 
polynomial equations with coefficients in k; this family depends on the chosen 
Weierstrafi equation, but is independent of K. (For a recent discussion concerning 
families of such equations, see [5].) 

If A is an elliptic curve over Q, then one can choose the Weierstrafi coefficients 
ai to be rational integers. The coefficients are essentially unique if we demand that 
the discriminant of the equation have the smallest possible value; the discriminant 
is then said to be the (minimal) discriminant A of A. 

Those prime numbers which divide A are the primes at which A has bad reduc- 
tion; the others are the primes at which A has good reduction. The point is that, for 
good primes p, the minimal equation, when viewed mod p, yields an elliptic curve 
A p over the finite field Z/pZ. The reduced curve A p over Z/pZ is a projective 
plane curve over Z/pZ; the group A p (Z/pZ) consisting of the points of A p with 
coordinates in Z/pZ is then a finite abelian group. A theorem of H. Hasse states 
that the order of this group is approximately p. More precisely, the integer 

b p := p+1 - #(A p (Z/ P Z)) 

is bounded in absolute value by 2^/p [84, Ch. V, Th. 1.1]. 

To work with a concrete example, let us introduce the elliptic curve A over Q 
defined by the equation y 2 + y = x 3 — x 2 . The group A(Q) has five evident points: 
the origin O, and the four affine points gotten by taking y e {0, —1} and x G {0, 1}. 
One may verify that these points form a subgroup of A(Q). Since they remain 
distinct under reduction mod p, A p (Z/pZ) has a subgroup of order 5 whenever A 
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has good reduction at p. Accordingly, the number #(A p (Z/pZ)) is divisible by 5, 
so that b p = p+1 mod 5 for all primes p which do not divide the discriminant of A. 

Now Table 1 of [4] informs us that the minimal discriminant of A is —11. There- 
fore, integers b p are defined for all p ^ 11. When p is small, it is not hard to 
compute b p ; one finds 62 = —2, 63 = —1, 65 = 1, and so on. (The mod 5 congruence 
on the bp, plus Hasse's bound \b p \ < 2^/p, determines the first few of these integers.) 
Anticipating the conjecture of Shimura and Taniyama which will be discussed be- 
low, I would like to point out that the arithmetically defined b p are known to agree 
with the prime-indexed coefficients a p of the weight-two modular form h on Fq (11) 
which was introduced above. The astounding identity b p — (Xp IS ct special case 
of a relation which was discovered by Eicher and Shimura (and which is recalled 
in [79]). A priori, the Eichler- Shimura relation gives information only about those 
elliptic curves which are related geometrically to modular curves of the form Xo(N). 
The Taniyama-Shimura conjecture states that all elliptic curves over Q can be so 
related. 

Next, suppose that A and A' are elliptic curves over k. An isogeny A — > A' 
over k is a non-constant map of curves over k which takes the distinguished point 
O of A to the corresponding point O' of A. If such a map exists, then it is a 
map of algebraic groups, and A and A' are said to be isogenous over k. (As the 
terminology suggests, the relation of being isogenous is symmetric; it is in fact an 
equivalence relation.) It is not difficult to show that two isogenous elliptic curves 
over Q have the same primes of bad reduction. (This follows from the criterion of 
Neron-Ogg-Shafarevich — see [77] or [84, Ch. VII, §7].) Moreover, if A and A' are 
isogenous over Q, then for each good reduction prime p, one has 

#(i p (Z/pZ)) = #(i' p (Z/pZ)). 

In other words, the numbers b p are the same for A and A', so that one might 
make the informal statement that A and A' are "equivalent arithmetically." A 
striking theorem of G. Faltings [19, §5] states that, conversely, two elliptic curves A 
and A' over Q are isogenous if #(A p (Z/pZ)) = #(A' p (Z/pZ)) for all primes p at 
which the two curves have good reduction. (In [19], Faltings proves a more general 
statement about homomorphisms between abelian varieties over number fields, thus 
confirming conjectures of J. Tate.) 

Each elliptic curve A over Q has a conductor, which is a positive integer divisible 
precisely by the primes at which A has bad reduction. For example, the curve with 
equation y 2 +y = x 3 —x 2 has conductor 11. Although the definition of the conductor 
is somewhat unenlightening (see for example [71, §2]), a well known algorithm of 
J. Tate [86] makes it possible to compute conductors by hand in specific cases. 
Alternatively, the computer algebra program gp [3] , the Mathematica package [44] 
and the Maple package apecs all implement Tate's algorithm— and more generally 
make it easy to perform elliptic curve calculations on a workstation or personal 
computer. (The latter package is recommended by F. Gouvea.) 

Because the conductor is divisible exactly by the set of "bad primes," the conduc- 
tor and the minimal discriminant of A are divisible by the same set of prime num- 
bers. Nevertheless, these integers have a completely different feel. For one thing, the 
conductor of an elliptic curve depends only on its Q-isogeny class, while the discrim- 
inant may change under isogeny. (The curve with equation y 2 +y = x 3 — x 2 — lOx— 20 
is isogenous to the conductor-11 curve that we have been discussing; its conductor 



GALOIS REPRESENTATIONS AND MODULAR FORMS 



7 



is 11, but its minimal discriminant is —ll 5 .) For another, the conductor is always 
positive; the minimal discriminant may be positive or negative. Finally, the latter 
number may be divisible by a large power of a given prime, whereas the conductor 
of an elliptic curve tends to be divisible only by low powers of its prime divisors. (In 
particular, a prime p > 5 can divide the conductor at most to the second power.) 
A beautiful formula of A. Ogg [57] expresses the conductor of a given curve A in 
terms of the minimal discriminant and the Neron model of A. (The latter is a curve 
over Z which may be regarded as the "best possible" model for A. See also [84, 
App. C, §16] for a statement of Ogg's formula.) 

Suppose that the conductor of A is N. Then A is said to be semistable at a prime 
number p if p 2 does not divide N. This means either that p is prime to N, in which 
case A has good reduction at p, or else that p "exactly" divides N, in which case 
the reduction of A at p is bad — but not too bad (it is said to be multiplicative). If 
A is semistable at all primes p, i.e., if N is square free, then the elliptic curve A is 
said to be semistable. Semistable elliptic curves occur in connection with Fermat's 
Last Theorem, and in other applications. 

This is a good point to insert a short digression about abelian varieties, whose 
arithmetic theory is exposed in various chapters of [12] and the recent graduate-level 
text [54]; see also the books by such authors as A. Weil, S. Lang [37], D. Mumford, 
H. P. F. Swinnerton-Dyer, G. Kempf and H. Lange. As was mentioned very briefly 
above, an abelian variety over a field k is a projective algebraic variety over k which 
is equipped with the structure of an algebraic group over k. The first examples of 
abelian varieties are obtained by taking Jacobians of curves; the Jacobian of a curve 
of genus g over k is an abelian variety over k of dimension g. (For the construction of 
Jacobians, the reader may consult, e.g., Chapter V of [76].) If A is an elliptic curve 
over k, then the chosen origin O of A enables one to identify A (endowed with its 
group structure) with the Jacobian of A. In fact, an elliptic curve over k is nothing 
other than an abelian variety over k of dimension one. Since an abelian variety of 
dimension one is an elliptic curve (and since an abelian variety of dimension zero 
is just a single point), one might describe abelian varieties as "higher-dimensional 
analogues" of elliptic curves. 

Abelian varieties play an inevitable role in our story because the conjecture 
which we are about to discuss (a priori one involving elliptic curves over Q and 
weight-two newforms with integer coefficients) extends naturally to a conjectural 
dictionary between arbitrary newforms of weight two and a certain class of abelian 
varieties over Q (see Conjecture 2 below). 

4. The Taniyama-Shimura conjecture 

The conjecture of Shimura and Taniyama relates elliptic curves over Q and cer- 
tain modular forms. Its history is the subject of an engrossing "file" compiled by 
S. Lang [38]. If I understand correctly, the conjecture was first posed as a tentative 
question by Taniyama at the Tokyo-Nikko conference of 1955. Shimura stated the 
conjecture in its present form in the early 1960s. In 1968, A. Weil proved a theorem 
to the effect that certain necessary conditions for an elliptic curve to be "modular" 
are, in fact, sufficient [91]. Because of this theorem, Weil's name has sometimes 
been attached to the conjecture. 

Before giving a formal description of the conjecture, we refer once again to the 
elliptic curve y 2 + y = x 3 — x 2 , which has conductor 11. The integers b p which 
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control the numbers of mod p points on this curve might be viewed initially as 
mysterious quantities for which we seek a "formula." The relation b p = a p , where 
a p is the pth coefficient of the normalized eigenform in £(11) may be regarded as 
such a formula. 

The Taniyama-Shimura conjecture affirms that there is an analogous relation for 
all elliptic curves over Q. Namely, if A is an elliptic curve over Q of conductor N, 
then one conjectures that there is a newform f = a n q n in S(N) such that 
bp = a p for all primes p / N. All coefficients a n of / are then necessarily rational 
integers. (For another account of the conjecture, see the article by K. Rubin and 
A. Silverberg [68, §1].) 

A geometric formulation of the Taniyama-Shimura conjecture may be given in 
terms of the construction presented in Chapter 7 of [80] and, from a different 
perspective, in [83]. Suppose that / G S(N) is a normalized eigenform and let E 
be the field generated by the coefficients of /. Shimura associates to / an abelian 
variety Af over Q whose dimension is the degree [E: Q] and whose arithmetic 
incorporates the eigenvalues a p for p prime to N. Although the construction of Af 
is perfectly precise, it is fruitful in this context to regard the association / ^ Af 
as a flabby one linking / to a "clump" of isogenous abelian varieties, rather than 
a specific abelian variety which is singled out up to isomorphism. (The relevant 
notion of isogeny is an appropriate generalization of the notion of isogeny for elliptic 
curves.) 

If the Fourier coefficients of / are rational integers, then E = Q and Af has 
dimension 1. This means that Af is an elliptic curve over Q, which we shall 
regard as being defined only up to isogeny. According to a theorem of Eichler 
and Shimura, the eigenvalues a p are reflected in the arithmetic of the elliptic curve 
A = Af in the following way. If p does not divide N, then A has good reduction 
at p. Further, for such p, the pth Fourier coefficient of / coincides with the quantity 
b p : = p+1 — #(A p (Z/pZ)). In other words, one has b p = a p for all p % N. (If Af has 
dimension greater than 1, the relation between / and Af is a bit more complicated 
to formulate, but involves no new ideas.) 

In its geometric form, the Taniyama-Shimura conjecture states that every elliptic 
curve A over Q is modular in the sense that it is isogenous to some curve Af. In 
other words, the conjecture asserts the surjectivity of the construction / m Aj, 
viewed as a map from eigenforms with integral coefficients (in some S(N)) to isogeny 
classes of elliptic curves over Q. In analogy with the arithmetic formulation, when 
A has conductor N, A is conjectured to be isogenous to an Af with / G S(N). 

The connection between the two formulations is as follows. Suppose that A is an 
elliptic curve over Q of conductor N, and assume that A is related arithmetically 
to an eigenform in S(N). Specifically, assume that / = Yl a nQ n is a normalized 
eigenform in S(N) with integral coefficients and that a p = b p for all p prime to N. 
(The b p have their usual meaning.) Let A' be the elliptic curve Af, and write b' p for 
the analogues of the b p for A'. Then one has b' p = a p for all pi N by the formula 
of Eichler-Shimura, and hence b p = B' p for all p / N. A theorem of Faltings which 
was quoted above then ensures that A and A' = Af are isogenous over Q, so that 
the geometric form of the Taniyama-Shimura conjecture is true for A. Conversely, 
if A is isogenous to an Af, then numbers b p computed for A coincide with their 
analogues for Af. By the Eicher- Shimura formula, these latter numbers are the 
prime-indexed coefficients of /. 
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In connection with the construction f Af, let us consider the situation where 
/ is a normalized eigenform in S(N) with integral Fourier coefficients but where / 
is not necessarily a newform. What is the conductor of the elliptic curve A = Af? 
The answer to this question begins with the fact that / is necessarily built from 
a newform in S(M), for some unique divisor M of N. It is then true that the 
conductor of A is precisely this divisor M. This theorem was proved by H. Carayol 
in [9] , following work of Shimura, Igusa, Deligne and Langlands. 

A formulation of the Taniyama-Shimura conjecture with a completely different 
flavor is provided by Mazur's article [48]. In this article, Mazur rephrases the 
conjecture as a statement about the Riemann surface associated with an elliptic 
curve over Q. If A is such an elliptic curve, we write A(C) for this Riemann surface, 
which may be realized as the subset of the complex projective plane which is defined 
by a Weierstrafi equation for A. This surface is holomorphically a complex torus. 
For each integer N, consider the subgroup T 1 (N) of T (N) consisting of matrices 



of Tq(N), one obtains an analogue of X (N) which is called X\(N). Mazur shows 
that an elliptic curve A over Q is modular if and only if there exists a non-constant 
holomorphic map from Xi(N) to A(C), for some positive integer N. As Mazur 
explains in his article, one can paraphrase this condition as the statement that 
the arithmetic object A is hyperbolically uniformized, since H is a model for the 
hyperbolic plane. This circumstance has led to the charge that Wiles's proof of 
Fermat's Last Theorem could not possibly be correct since its logical structure 
involves a statement that may be interpreted in terms of hyperbolic geometry [90] . 
For a refutation, see [7]. 

Mazur's observation led Serre to ask for a description of the set of elliptic curves 
over the complex field which satisfy Mazur's condition: Which elliptic curves A 
over C are modular in the sense that one can find a non-constant holomorphic map 
Xi(N) — > A(C) for some positive integer A? (According to Mazur's theorem, an 
elliptic curve over Q is modular in the usual sense if and only if it is modular in 
this new sense when viewed over C.) In [64], I provide a conjectural answer to 
Serre's question. Namely, I show that the conjectures made by Serre in [75] imply 
the following statement, which is similar in spirit to the analysis in §10 of [82]. 

Conjecture 1. Let A be an elliptic curve over C. Then A is modular if and only 
if A is isogenous to all elliptic curves a A obtained by conjugating A by algebraic 
automorphisms a of the field C. 

Conjecture 1 is related to Serre's conjectures via a second conjecture, which we will 
state after some motivating remarks. Consider a normalized eigenform / = X] a nQ n 
in the space of weight-two cusp forms on ri(iV). Let E = Q(. . . , a n , . . . ) be the 
field generated by the coefficients of /, and let d = [E: Q] be the degree of E, 
i.e., the dimension of E as a Q- vector space. The abelian variety Af is an abelian 
variety over Q of dimension d which comes equipped with an action of E. To give 
sense to the last statement, one introduces the ring End(Aj) whose elements are 
maps Af — > A f in the category of algebraic varieties over Q which respect the group 
structure on Af. (Such maps are the endomorphisms of Af.) The ring End(Af) 
turns out to be a free rank-<i module over Z; the associated Q-algebra End(Af) ® Q 
is isomorphic to E. Thus Af has many endomorphisms; moreover, it is "modular" 
in the sense that there is a non-constant map X\{N) — > A which is defined over Q. 




E T (N) for which a = d = 1 mod N. By considering T\(N) in place 
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Conjecture 2. Let A be an abelian variety over Q for which End(A) ® Q is a 
number field of degree equal to dim A. Then for some N > 1, there is a non- 
constant map Xi(N) — > A which is defined over Q. 

In [64], I prove that Serre's conjectures imply Conjecture 2 and that Conjecture 2 
implies Conjecture 1. 

It is natural to regard Conjecture 1 and Conjecture 2 as generalizations of the 
Taniyama-Shimura conjecture. The first conjecture pertains to elliptic curves which 
are not necessarily defined over Q, while the second pertains to abelian varieties 
over Q which are not necessarily elliptic curves. Neither of these conjectures is 
proved in [92]. The Taniyama-Shimura conjecture can be generalized still further. 
Indeed, a common generalization of Conjectures 1 and 2 will be presented in a 
forthcoming work of E. Pyle. See also [22]. 

5. Galois representations attached to elliptic curves 

Let A be an elliptic curve over Q. A model for A(K) when K = C is given by the 
Weierstrafi theory of complex analysis: the group A(C) is the complex torus C/L, 
where L is the lattice of periods associated to the given cubic equation. (Explicitly, 

L is obtained by integrating the differential y on A over the free abelian group 
H\(A(C), Z) of rank two.) Let n be a positive integer, and let A[n] be the group of 
elements of A(C) whose order divides n. This group of n-division points on A may 
be modeled as ^L/L; it is therefore a free module of rank two over Z/nZ, since L 
is free of rank two over Z. 

On reflection, one sees that A[n] in fact lies in A(Q), where Q is the subfield 
of C consisting of all algebraic numbers. Indeed, the group A[n] is a finite sub- 
group of A(C) which consists of those points satisfying a certain set of polynomial 
equations with rational coefficients; it follows that the coordinates are algebraic 
numbers. Moreover, let Gal(Q/Q) be the group of automorphisms of Q. Then the 
same reasoning shows that A[n] is stable under the action of Gal(Q/Q) on A(Q) 
which results from the action of Gal(Q/Q) on Q. Thus A[n] comes equipped with 
a canonical action of the Galois group Gal(Q/Q). 

It is important to observe, for each a € Gal(Q/Q), that the automorphism 
P h-> °P is a group automorphism of A[n]; in symbols, a (P + Q) = °P + a Q for 
P,Q £ A[n]. This equation is a consequence of the fact that the composition law 
which expresses P + Q in terms of P and Q involves only polynomials with rational 
coefficients. Our observation means that the action of Gal(Q/Q) on A[n] may be 
viewed as a (continuous) homomorphism 

p A , n : Gal(Q/Q) - Aut(A[n]) 

in which Aut(A[n]) stands for the group of automorphisms of A[n] as an abelian 
group. Since A[n] is isomorphic to the group (Z/nZ) 2 , one has 

Aut(A[n]) « GL(2,Z/nZ), 

where the group on the right consists of two-by-two invertible matrices with coeffi- 
cients in Z/nZ. While there is no canonical isomorphism between these groups, 
each choice of basis A[n] xs (Z/nZ) 2 determines such an isomorphism; more- 
over, the various isomorphisms obtained in this way differ by inner automorphisms 
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of GL(2, Z/nZ). Therefore, each element of Aut(A[n]) has a well-defined trace and 
determinant in Z/nZ. 

It is often fruitful to fix a choice of basis A[n] (Z/nZ) 2 and to view pA, n 
as taking values in the matrix group GL(2, Z/nZ). Once this choice is made, 
PA,n becomes matrix- valued representation of the Galois group Gal(Q/Q); it is 
the representation of Gal(Q/Q) defined by the group of n-division points of A. 
The kernel of this representation corresponds, via Galois theory, to a finite Galois 
extension K n of Q in Q. Concretely, this extension is obtained by adjoining to Q 
the coordinates of the various points in A[n]. The Galois group G n := Gal(if n /Q) 
may thus be identified with the image of pa,u, which is a subgroup of the target 
group GL(2, Z/nZ). The elliptic curve A and the positive integer n have given rise 
to a finite Galois extension K n /Q whose Galois group is a subgroup of the group 
of two-by-two invertible matrices with coefficients in Z/nZ. 

It is natural to ask for a description of G n as a subgroup of GL(2, Z/nZ), cf. [79]. 
There is a (relatively rare) special case to consider: that where A has complex 
multiplication (over C). When A is viewed as C/L, the complex multiplication 
case is that for which there is a complex number a (jL Z such that aL C L. The 
group G n then has an abelian subgroup of index < 2, so it is much smaller than the 
ambient group GL(2, Z/nZ). In the more common case where A has no complex 
multiplication, Serre showed in [72] that the index of G n in GL(2, Z/nZ) is bounded 
as a function of n. In particular, G p = GL(2,Z/pZ) for all but finitely many 
primes p. 

As background, we point out that the Taniyama-Shimura conjecture was proved 
for complex multiplication elliptic curves over Q by Shimura in 1971 [81]. The 
result of [81] is suggestive and may be regarded as evidence for the general case of 
the Taniyama-Shimura conjecture. As we recall below, however, the elliptic curves 
which appear in connection with Fermat's Last Theorem are semistable. And it 
is a fact that semistable elliptic curves over Q never have complex multiplication. 
(One possible proof can be summarized as follows: An elliptic curve with complex 
multiplication has an integral j-invariant, i.e., potentially good reduction. Hence 
if it is semistable, it has good reduction everywhere. However, a theorem of Tate 
states that there is no elliptic curve over Q with everywhere good reduction, cf. [21].) 
Accordingly, the theorem of [81] cannot be used to prove Fermat's Last Theorem. 

A key piece of information about the extension K n /Q (which depends on A as 
well as on n) is that its discriminant is divisible only by those prime numbers which 
divide either n or the conductor of A. In other words, if p | n is a prime number 
at which A has good reduction, then K n /Q is unramified at p; one says frequently 
that the representation pa,u is unramified at p. Whenever this occurs, a familiar 
construction in algebraic number theory produces a Frobenius element a p in G n 
which is well defined up to conjugation. 

We shall now summarize this construction with K n replaced by an arbitrary 
finite Galois extension K of Q. Let Ok be the ring of algebraic integers in K. The 
Galois group Gdl(K/ Q) leaves Ok invariant, so that one obtains an induced action 
of Gal(-fT/Q) on the ideals of Ok- The set of prime ideals p of Ok which contain 
the prime number p is permuted under this action. For each p, the subgroup D p 
of Gal(K/Q) consisting of those elements in Gal(if/Q) which fix p is called the 
decomposition group of p in Gal(K/Q). Meanwhile, the finite field F p := Ok/P is 
a finite extension of the prime field F p . The extension F p /F p is necessarily Galois; 
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its Galois group is the cyclic group generated by the Frobenius automorphism 

<f p : x I— > x p 

of F p . There is a natural map D p — > Gal(F p /F p ), gotten by associating a given 
5 G -Dp to the automorphism of Ok/P induced by 5. This map is surjective; its 
injectivity is equivalent to the assertion that p is unramified in the extension Kj Q. 
Therefore, whenever this assertion is true, there is a unique a p G D p whose im- 
age in Gal(F p /F p ) is (p p . The automorphism a p is then a well defined element 
of Gal(.ftT/Q), known as the Frobenius automorphism for p. It is easy to show that 
the various p are all conjugate under Gal(_ftT/Q) and that the Frobenius automor- 
phism for the conjugate of p by g is ga p g~ 1 . In particular, the various a p are all 
conjugate; this justifies the practice of writing o p for any one of them and stating 
that o p is well defined up to conjugation. 

For later use, we prolong this digression and introduce the concept of Frobenius 
elements in Gal(Q/Q). Let p again be a prime number, and let p now be a prime 
of Q lying over p. (One can think of p as a coherent set of choices of primes 
lying over p in the rings of integers of all finite extensions of Q in Q.) To p we 
associate: (1) its residue field F p , which is an algebraic closure of the finite field 
F p , and (2) a decomposition subgroup D p of Gal(Q/Q). There is again a surjective 
map Dp — > Gal(Fp/F p ). The Frobenius automorphism ip p : x \— > x p generates the 
target group in the topological sense: the subgroup of Gal(F p /F p ) consisting of 
powers of ip p is dense in Gal(F p /F p ). We shall use the symbol Frob p to denote any 
preimage of (p p in D p and refer to Frob p as a Frobenius element for p in Gal(Q/Q). 

One thinks of Frob p as a specific element of Gal(Q/Q), albeit one which is 
doubly ill-defined. The ambiguities in Frob p result from the circumstance that p 
needs to be chosen and from the fact that .Dp — > Gal(F p /F p ) has a large kernel, 
the inertia subgroup I p of D p . The usefulness of Frob p stems from the fact that 
the various p are conjugate by elements of Gal(Q/Q), so that all the subgroups 
.Dp of Gal(Q/Q) are conjugate, and similarly all I p are conjugate. Thus if p is a 
homomorphism mapping Gal(Q/Q) to some other group, the kernel of p contains 
one I p if and only if it contains all I p . In this case, one says that p is unramified 
at p; the image of Frob p is then an element of the target group of p which is well 
defined up to conjugation. Note that one may write pA, n (Frob p ) = a p for all primes 
p at which pA, n is unramified. As has been stated, these include all primes which 
divide neither n nor the conductor of A. 

Let us return now to the matrix group G n . We pointed out above that each 
element of G n has a trace and determinant in Z/nZ which are independent of 
any choice of basis. The Frobenius element a p is an element of G n which is well 
defined only up to conjugation. Nevertheless, the trace and determinant of a p are 
well-defined, since conjugate matrices have the same traces and determinant. The 
number det a p is the residue class of p mod n. On the other hand, one has the 
striking congruence 

tr(<7p) = b p mod n, 

where b p is the number p+1 — #(A(Z/pZ)) introduced above. This means that 
the representation pa,u encapsulates information about the numbers b p (for prime 
numbers p which are primes of good reduction and which are prime to n); more 
precisely, it determines the numbers b p mod n. 
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6. Galois representations attached to modular forms 

Suppose that / G S(N) is a normalized eigenform. The coefficients a n of / are 
always algebraic integers, but not necessarily ordinary integers. If it happens that 
the a n all lie in Z, then the abelian variety A = Af is an elliptic curve. By 
considering the family pA,m one obtains a series of representations of the Galois 
group Gal(Q/Q). These representations are related to / by the congruence tr(a p ) = 
a p mod n, valid for the nth representation and all primes p\nN . We are especially 
interested in the case where n is a prime number £; the ring Z/nZ is then the finite 
field F£. 

The representations p are associated to A, which in turn arises from /. Hence 
it is tempting to write pf/ for the representations pA,e- The obstacle to doing 
this arises from the circumstance that A is determined up to isogeny, but not 
always up to isomorphism. If one replaces A by an isogenous elliptic curve, the 
representations pA,e may change! To circumvent this difficulty, we introduce the 
"semisimplifications" of the pa/- 

These representations are defined as follows. If p is a two-dimensional represen- 
tation of a group over a field, p is either irreducible, or else "upper-triangular," 
i.e., an extension of a one-dimensional representation a by another, (3. In the case 
where p is irreducible, we declare its semisimplification to be p itself. In the re- 
ducible case, the semisimplification of p is the direct sum of the two one-dimensional 
representations a and (3. Clearly, the trace and determinant are the same for p and 
for its semisimplification. 

When A is fixed, the results of [72] show that pA,t can be reducible only for a 
finite number of £. In fact, a theorem of Mazur [46] shows that pa,i is irreducible for 
all £ not in the set { 2, 3, 5, 7, 13, 11, 17, 19, 37, 43, 67, 163 }. Hence the replacement 
of pa,(. by its semisimplification can be thought of as "fine tuning" which affects 
only a small number of the representations. One shows easily for all £ that the 
semisimplification of pA,t depends only on / and on £ (but not on the choice of A). 
Introducing 

Pfj := semisimplification of Pa,£, 

one obtains a sequence of semisimple representations of Gal(Q/Q) which are well 
defined up to isomorphism. The characteristic property of p may be summarized 
in terms of Frobenius elements Frob p in the Galois group Gal(Q/Q), elements 
which were introduced above. Namely, if p is a prime number not dividing £N, 
then p/^(Frob p ) has trace a p mod £ and determinant p mod £. 

It is natural to generalize this process by considering the situation where / = 
^2 a n q n is a normalized eigenform whose coefficients a n are algebraic integers, but 
not necessarily rational integers. As we indicated above, the field E = Ef generated 
by the a n is a number field, i.e., a finite extension of Q. Moreover, the coefficients 
a n of / lie in the integer ring Of of E. It is perhaps worth noting that the ring 
Z[. . . , a n , . . .] generated by the a n inside E, while a subring of finite index in Of, 
is not necessarily equal to Of. 

Using the abelian variety Af, one constructs representations indexed not by 
the prime numbers, but rather by the non-zero prime ideals of Of . (For details, 
see [80, Ch. 7].) If A is such a prime, its residue field is a finite field, say of 
characteristic £. The prime field = Z/£Z is then canonically embedded in F A . 
For each A, one finds a semisimple representation Pf,\: Gal(Q/Q) — > GL(2,F^) 
which is characterized up to isomorphism by the following property: if p is a prime 
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number not dividing £N, then p/ ^Frobp) has trace a p mod A and determinant p 
mod A. 

The assertion concerning the determinant of the matrices pf j \(Frob p ) may be 
rephrased as the statement that the determinant of the representation pf y \ is the 
mod £ cyclotomic character xe- This character is defined by considering the group 
Pi of £th roots of unity in Q; the action of the Galois group Gal(Q/ Q) on the cyclic 
group p,£ gives rise to a continuous homomorphism 

Xi: Gal(Q/Q) - Aut(^). 

Since pi is a cyclic group of order £, its group of automorphisms is canonically 
the group (Z/£Z)* = F|. We emerge with a map Gal(Q/Q) — > F|, which is the 
character in question. The equality 

det p fjX = Xe 

interpreted by viewing both homomorphisms as taking values in F^. 

Suppose now that c G Gal(Q/Q) is the automorphism "complex conjugation." 
Then the determinant of Pf,\(c) is Xt( c )- Now c operates on roots of unity by the 
map C I— > C -1 , since roots of unity have absolute value 1. Accordingly, 

det(p/, A (c)) = -1; 

one says that p/ y \ is odd. 

This parity statement generalizes to modular forms "with Nebentypus" whose 
weights are not necessarily two. Here is a quick synopsis of the situation; some 
relevant references are provided in [60]. For integers k > 1, N > 1 and characters 
e: (Z/iVZ)* — > C*, one considers the space Sk(N,e) of weight-/? cusp forms with 
character e on r (iV); we have S(N) = 62 (iV, 1). This space is automatically zero 
unless e(— 1) = (— l) fc , so we will assume that this parity condition is satisfied. The 
space Sk{N, e) admits an operation of Hecke operators T n , and we again have the 
concept of a normalized eigenform in Sk(N, e). If / = a nQ n is such a form, the 
numbers a n (n > 1) and the values of e all lie in a single integer ring Of. For each 
non-zero prime ideal A of Of, one constructs a semisimple representation 

Pf X - Gal(Q/Q)^GL(2,F A ). 

Let I again denote the characteristic of F\. Then for all p | £N, the trace 
of ^/^(Frobp) is again a p mod A. The determinant of this matrix is p k ~ 1 e(p) 
mod A. 

Once the proper definition is made, the determinant of the map pf t \ becomes 
the product X^ _1 e. In writing detp/ )A = X^ _1 e 5 we use xe to denote the mod £ 
cyclotomic character and employ a standard construction to regard e as a map 
Gal(Q/Q) — > F A . The construction in question begins with the map Gal(Q/Q) — > 
(Z/iVZ)* giving the action of Gal(Q/Q) on the iVth roots of unity. Composing 
this map with the character e, we obtain a homomorphism Gal(Q/Q) — > O^. On 
reducing this homomorphism mod A, we obtain the desired variant of e. 

Evaluating the formula detp/ A = x\~ X £ on c = "complex conjugation" , one 
finds 

det( P/ , A (c)) = (-l)*"^) = -1. 
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In these equalities, we exploit the fact that e(c) is another name for e(— 1) and 
remember the parity condition e(— 1) = (— l) fc . The upshot of this is that the 
representations pf : \ are always odd, even in the generalized set-up. 

In fact, it is possible in this situation to find a normalized eigenform /' of 
weight two with some character e', along with a maximal ideal A' of the inte- 
ger ring for /', so that the representations pf t \ and Pf,\' are isomorphic, cf. [67, 
Th. 2.2 and Cor. 3.2]. (To compare these representations, it is necessary to em- 
bed the residue fields of A and of A' in a suitably chosen common finite field of 
characteristic £.) Hence the "generalized set-up" can be reduced to the case of 
weight two, provided that one considers eigenforms for which the associated char- 
acters may be non-trivial. The process of reduction to weight two is a very powerful 
one in the theory, since the representations arising from forms of this weight are 
constructed directly from points of finite order on abelian varieties. To the best of 
my knowledge, the idea of reducing systematically to weight two originated with 
an unpublished 1968 manuscript of Shimura [78]. 

Before leaving this topic, we should mention that the cases k = 1 and k > 1 are 
quite distinct in flavor. In the former case, the representations pf : \ may be viewed 
as the set of reductions of a single continuous representation pf with finite image. 
For details, see [16]. 

7. SERRE'S CONJECTURES 

We shall give a brief summary of conjectures made by J.-P. Serre in [75]. A recent 
article by H. Darmon [15] discusses the conjectures more extensively and emphasizes 
applications and numerical examples. 

Let £ be a prime number and let F be an algebraic closure of the prime field 
Fg. Suppose that p: Gal(Q/Q) — > GL(2,F) is an odd continuous representation. 
It seems natural to ask whether or not p is the mod A representation attached to 
a suitable normalized eigenform. Since the representations pf t \ are semisimple by 
definition, it is necessary to limit our discussion to the case where p is semisimple. 
In fact, the case where p is semisimple and reducible is sometimes awkward, so we 
will assume from now on that p is irreducible. However, the excluded case where p 
is reducible is quite interesting; see [8] for some observations in this case. 

Let us say then that p is modular if one can find: (i) a normalized eigenform / in 
some space Sk(N, e); (ii) a prime A dividing £ in the ring of integers Of associated 
to /; and (iii) an embedding Fa > F such that p is isomorphic to the representation 
obtained by composing pf^\ with the inclusion 

GL(2,F A )^GL(2,F) 

associated with (iii). A weak form of the conjectures made by Serre in [75] is the fol- 
lowing statement: Every irreducible continuous odd representation p: Gal(Q/Q) — > 
GL(2, F) is modular. 

This statement was first formulated by Serre in the 1970s for modular forms of 
level 1 (i.e., on SL(2,Z)). For such forms, the representations pf y \ are ramified 
only at £; Serre asked whether an odd irreducible p which is unramified outside I 
is necessarily associated to a normalized eigenform on SL(2,Z). Tate confirmed 
this for £ = 2 [87] by showing that there are no such representations. (As Tate 
remarks at the end of his article, Serre treated the case £ = 3 in a similar manner 
by exploiting the discriminant bounds of Odlyzko and Poitou.) The case where p 
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may be ramified at primes other than £ was taken up by Serre in the mid-1980s, 
when computer calculations by J.-F. Mestre convinced Serre that the conjectured 
statement was plausible. 

The qualitative conjecture to this effect is supplemented in [75] by an intricate 
recipe which pinpoints the space Sk{N,e) where one should find an eigenform / 
giving rise to a specific representation p. (As Serre later observed, the recipe for e 
needs to be modified in certain cases when £ = 2 or 3.) The conjunction of the 
qualitative statement that p is modular and the precise recipe fingering the space 
Sk{N,e) is sometimes called the Strong Serre Conjecture. One possible justifica- 
tion for this name is the fact that the "strong" conjecture immediately implies the 
Taniyama-Shimura conjecture, Fermat's Last Theorem, and a host of other asser- 
tions! It has gradually emerged that the qualitative statement and its strong cousin 
are in fact equivalent, at least when £ > 2; see [67] and [17] for a proof of the equiv- 
alence. Hence it is now possible to use the singular term "Serre's conjecture" to 
refer to what was initially a package of interrelated conjectures. 

Perhaps I should close this section by expressing the sentiment that the con- 
jecture of Serre, while visibly important, currently seems intractable. Given an 
irreducible representation p with odd determinant, one is at a loss for a strategy 
which will lead to a proof that p is modular. In my Progress in Mathematics lecture, 
I engaged in a certain amount of philosophical speculation, stressing the parallel 
between the Taniyama-Shimura conjecture and Serre's conjecture. Each conjecture 
states that all objects of a certain type are modular; in both cases one has a uni- 
directional "arrow"— a means of constructing objects from modular forms. Thus 
one's impulse is to try to attack these conjectures by an appropriate form of "count- 
ing." While Serre's conjecture is broader than the Taniyama-Shimura conjecture 
(the former implies the latter), one might suspect that Galois representations might 
be easier to count than elliptic curves. To the extent that this is so, one could imag- 
ine attacking the geometric conjecture about elliptic curves via the Galois-theoretic 
conjecture of Serre. 

This philosophy is perhaps not far removed in spirit from the strategy used 
by Andrew Wiles in approaching the Taniyama-Shimura conjecture. Certainly, 
however, the analogy should not be taken too seriously; in fact, Wiles introduced his 
approach in 1993 with the statement that it was "orthogonal" to Serre's conjecture. 

8. Frey's construction 

Like most recent work on Fermat's Last Theorem, the connection between Serre's 
conjecture and FLT begins with constructions linking solutions to Fermat's equa- 
tion with elliptic curves. Although Y. Hellegouarch and others had noted such 
constructions, a decisive step was taken by G. Frey in an unpublished 1985 manu- 
script entitled "Modular elliptic curves and Fermat's conjecture." 

Frey's idea goes as follows. Suppose that there is a non-trivial solution to Fer- 
mat's equation X i + Y i = Z £ . We can assume that the exponent is a prime number 
different from 2 and 3 and that the solution is given by a triple of relatively prime 
integers a, 6, and c. The equation y 2 = x(x — a e )(x + b £ ) then defines an elliptic 
curve A with unexpected properties. 

These properties are catalogued in §4.1 of Serre's article [75]: After performing 
some elementary manipulations, we arrive at a triple (a, 6, c) in which b is even 
and c is congruent to 1 mod 4. Frey's construction yields for this triple an elliptic 
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curve A whose conductor is the product of the prime numbers which divide abc (each 
occurring to the first power). In particular, A is semistable. On the other hand, 
the minimal discriminant A of A is the quotient of (abc) 2i by the factor 2 8 . From 
Frey's point of view, the main "unexpected" property of A is that A is the product 
of a power of 2 and a perfect £th power, where £ is a prime > 5. Frey translated 
this property into a statement about the Neron model for A: if p is an odd prime 
at which A has bad reduction, the number of components in the mod p reduction 
of the Neron model is divisible by £. Frey's idea was to compare this number to 
the corresponding number for the Jacobian of the modular curve Xq(N), where N 
is the conductor of A. Frey predicted that a discrepancy between the two numbers 
would preclude A from being modular. In other words, Frey concluded heuristically 
that the existence of A was incompatible with the Taniyama-Shimura conjecture, 
which asserts that all elliptic curves over Q are modular. 

Frey's construction spawned several lines of inquiry, in which mathematicians 
sought either to prove Fermat's Last Theorem outright, or else to link it to estab- 
lished or emerging conjectures such as the abc conjecture and Szpiro's conjecture. 
These latter conjectures are treated by such articles as [23], [24], [32], [39], [50] 
and [56]. From the point of view of Szpiro's conjecture and the abc conjecture, 
the surprising feature of Frey's curve is the size of its discriminant, rather than 
any special properties of the discriminant's factorization. For Frey's curve A, the 
absolute value of the discriminant can be bounded from below by a high power of 
the conductor of A. 

To illustrate the force of Frey's construction, we now sketch the deduction of 
Fermat's Last Theorem from Serre's conjectures [75]. (A word of caution: these 
conjectures are still conjectures!) Suppose that a, b and c are relatively prime 
integers which satisfy Fermat's equation with exponent £. After performing the 
manipulations mentioned above, we may write down a Frey curve A whose discrim- 
inant is the product of a power of 2 and a perfect £th power. If I is greater than 3, 
a theorem of Mazur [46] asserts that the representation p = p^,t defined by A[£] 
is an irreducible representation of Gal(Q/Q). Because of the hypothesis on the 
discriminant of A, p is unramified outside 2 and £; moreover it is "finite" at £ in a 
sense which is explained in [75]. The recipes of Serre's article require that p arises 
from a normalized eigenform in the space S(2). However, as was mentioned above, 
this space has dimension 0. 



A first step toward justifying Frey's heuristic conclusion was taken in August, 1985 
by Serre in a letter to J.-F. Mestre [74]. In this letter, the writer formulated 
two related conjectures about modular forms, which he called C\ and C 2 . (These 
conjectures predate the conjectures of [75] ; they are now special cases of the latter 
conjectures.) Serre pointed out that Fermat's Last Theorem is a consequence of 
the Taniyama-Shimura conjecture together with the two new conjectures. As it was 
thought initially that C\ and C2 would be easy to establish, the two statements 
immediately acquired the collective nickname "Conjecture e." One thus had 



9. Conjecture " 



EPSILON 




Fermat's Last Theorem. 



Serre's "e" conjecture is in fact a subtle statement about the mod £ Galois 
representations arising from eigenforms in the various spaces S(N). Specifically, 
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suppose that / G S(N) is a normalized eigenform, and let A be a prime ideal 
in the ring of integers of the field generated by the coefficients of /. Then pf^ 
is a semisimple representation of Gal(Q/Q) with values in a finite field, whose 
characteristic we will call t. This representation is unramified at all primes p 7^ I 
which do not divide N; in other words, p/ > has the right to be ramified at I and 
at those primes which divide N. Serre's conjecture concerns the case where pf t \ 
is unramified at such a prime: it predicts that this behavior can be attributed to 
the existence of a normalized eigenform /' of level lower than N which gives rise 

Specifically, suppose that pf t \ is irreducible, that I is different from 2, and that 
Pf^x is unramified at a prime number p 7^ i which divides N but whose square does 
not divide N. Serre's conjecture predicts that there is an eigenform /' e S(N/p) : 
together with a prime ideal A' in the integer ring of the field of coefficients of /, such 
that pf t \ and P/,a' are isomorphic. A variant of this conjecture concerns the case 
p = I. (Note that, as in a situation discussed earlier, one must embed the residue 
fields of A and of A' in a suitably chosen common finite field of characteristic I 
before comparing pf ; \ and Pf,\>-) 

I proved Serre's level-lowering conjecture in a 1990 article [62], thereby estab- 
lishing the implication 

Conjecture of Taniyama-Shimura =>- Fermat's Last Theorem 

which was the goal of Frey's construction. (See also [58] and [63] for expository 
accounts of this work.) Since the Frey curves associated with Fermat solutions 
are semistable elliptic curves, I proved that the semistable case of the Taniyama- 
Shimura conjecture implies Fermat's Last Theorem. 

To illustrate the logic used in establishing this implication, we consider a semi- 
stable elliptic curve A over Q, together with a prime I > 3 for which the represen- 
tation pa/ is irreducible. Suppose that pA,e is unramified at all primes p 7^ 2, £ and 
moreover that pA,e is "finite" at I. Then the results of [62] assert that A cannot 
be modular. To apply these results to Fermat's Last Theorem, we suppose that 
A is the Frey curve associated to a hypothetical solution to the degree-^ Fermat 
equation with I > 3. Then, as was noted above, A is semistable, and pA,e is an 
irreducible representation with the indicated ramification and "finiteness" proper- 
ties. Accordingly, A cannot be modular. Consequently, if all elliptic curves over Q 
are modular, then there can be no solution to Fermat's equation. 

Further light can be shed on [62] if we focus on the simplest situation in which 
its results apply. Suppose that A is an elliptic curve over Q whose conductor is a 
prime number p. Let I be a prime number different from 2 and p for which pa,i 
is irreducible. The representation pA,e is unramified at all primes other than p 
and £, and the contribution of [62] is to show that pA,t is indeed ramified at p if 
A is modular. To prove this, the one supposes that A is modular, so that pA,e is 
connected up with the space of weight-two cusp forms on T (p). It is possible to 
show that pa,i is similarly connected with other discrete subgroups of SL(2,R), 
coming from indefinite quaternion division algebras over Q. More precisely, there 
are prime numbers q 7^ p such that pa,£ arises from the quaternion algebra over Q of 
discriminant pq. The desired result about pA,e follows from a detailed comparison 
of the mod p and mod q reductions of the three modular curves Xq(j>), Xo(q) and 
Xo(pq) with the mod p and mod q reductions of the Shimura curve associated with 
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the quaternion algebra of discriminant pq. The latter curve is an analogue of X (pq) 
in which the group T Q (pq) is replaced by the group of norm-1 elements in a maximal 
order of the quaternion algebra of discriminant pq. 

10. Wiles' s strategy 

Suppose that A is an elliptic curve over Q. To verify the Taniyama-Shimura con- 
jecture for A is to link A to modular forms. In an approach inspired by Serre's 
conjecture, one might begin by considering the representations pA,t obtained from 
the action of Gal(Q/Q) on A[£], when £ is a prime number. If one could show that 
an infinite number of these representations are modular (in the broadest possible 
sense), one would go on to prove that A is modular. Alas, as was indicated above, 
it is not clear how to translate this approach into a proof. 

We mentioned previously that Wiles's approach to the Taniyama-Shimura con- 
jecture is "orthogonal" to one based on consideration of the varying pA,e- Here is 
the nub of the idea: One first fixes a prime t and considers the family of groups 
A\f \ for v = 1,2, The resulting sequence of representations 

p A ,r ■ Gal(Q/Q) -> GL(2, Z/rZ) 

may be packaged as a single representation 

p A , t °o: Gal(Q/Q) -> GL(2,Z £ ), 

where Z^ is the ring of £-adic integers, i.e., the projective limit of the rings Z/£ U Z. 
To prove that A is a modular elliptic curve, it suffices to show that pa,£°° is modular 
in an appropriate sense. Indeed, the trace of pa,i°° (Frob p ) coincides with the ratio- 
nal integer b p for all p / £N, where iV is the conductor of A. As soon as one finds an 
eigenform / in S(N) whose eigenvalues are related to the traces of pa,i°° (Frob p ), 
one has essentially proved that A is modular. 

Needless to say, if pA,t°° is modular, then so, in particular, is pA,e- Relating pA,t°° 
to modular forms is thus no easier than the formidable task of proving that pA,t is 
modular! On the other hand, to prove that A is modular by the £-adic method, we 
need only work with a single prime £. The approach of [92] capitalizes on the fact 
that the finite groups GL(2, F 2 ) and GL(2, F 3 ) are solvable. This circumstance 
enables one to apply deep results of Langlands [40] and Tunnell [89] to prove that 
Pa,£ is modular for £ < 3, cf. [68, §2.3]. (The relevant results of Langlands are those 
concerning the theory of base change a la Saito-Shintani. For expositions of these 
results, see [25] and [26].) 

Wiles's basic idea is to prove that that if £ is a prime for which pA,e is modular, 
then pA,t°° is automatically modular (and hence A is a modular elliptic curve). In 
thinking about the jump from pA,e to pa,£°°, ignores A as much as possible — the 
aim is to prove results about £-adic representations which can be applied to pa,i°° ■ 

11. The language of deformations 

We now introduce the machinery which underlies the jump from the modularity 
of pa,£ to the modularity of pA,e°° • We suppose for simplicity that A is a semistable 
elliptic curve over Q, and we let £ > 3 be a prime number for which pa,£ is both 
modular and irreducible. Choosing a basis of A[£], we regard pA,t as taking values 
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in the matrix group GL(2,F^). As was suggested above, we seek to establish the 
modularity of pa,£°° by a method which treats simultaneously all lifts of pa,i which 
are plausibly modular. 

In this context, lifts are continuous homomorphisms 

p: Gal(Q/Q) -> GL(2,S), 

where B is a complete local Noetherian Z^-algebra with residue field F^. They are 
constrained to lift pA,e i n the obvious sense. Namely, we require that pA,t coincide 
with the composite of p and the homomorphism GL(2,S) — > GL(2,F^) induced 
by the residue map B — > Fi. (his depiction ignores a technical wrinkle: it might to 
necessary later on to replace by the integer ring of a finite extension of the £-adic 
field Q^.) The lifts which are "plausibly modular" are those which obey a set of 
local properties. The word "local" is meant to allude to the restrictions of p to the 
subgroups Gal(Q p /Q p ) of Gal(Q/Q) obtained as decomposition groups for prime 
numbers p (or, more precisely, for primes of Q). Wiles imposes conditions on these 
restrictions which lift conditions already satisfied by pA,e- These conditions are 
summarized in §3.4 of [68]; we shall evoke them below as well. There is flexibility 
and tension implicit in the choice of these conditions. They should be broad enough 
to be satisfied by pa,£°° and tight enough to be satisfied only by lifts that can be 
related to modular forms. Roughly speaking, in order to prove the modularity of 
all lifts satisfying a fixed set of conditions, you need to specify in advance a space 
of modular forms £ so that the normalized eigenforms in S satisfy the conditions 
and such that, conversely, all lifts satisfying the conditions are plausibly related to 
forms in S. It is intuitively clear that this program will be simplest to carry out 
when the conditions are the most stringent and progressively harder to carry out 
as the conditions are relaxed. 

A theme which emerges rapidly is that there are at least two sets of conditions 
of special interest. Firstly, one is especially at ease when dealing with the most 
stringent possible set of conditions which are satisfied by pa,£] this leads to what 
Wiles calls the "minimal" problem. Secondly, one needs at some point to consider 
some set of conditions which allows treatment of the lift pa,£°°— this lift is, after 
all, our main target. It would be natural to consider the most stringent such set. 
The two sets of conditions may coincide, but there is no guarantee that they do; in 
general, the second set of conditions is more generous than the first. 

In [92], Wiles provides a beautiful "induction" argument which enables him to 
pass from the minimal set of conditions to a no n- minimal set. Heuristically, this 
argument requires keeping tabs on the set of those normalized eigenforms whose 
Galois representations are compatible with an incrementally relaxing set of condi- 
tions. As the conditions loosen, the set of forms must grow to keep pace with the 
increasing number of lifts. The increase in the number of lifts can be estimated from 
above by a local cohomological calculation. A sufficient supply of modular forms 
is then furnished by the theory of congruences between normalized eigenforms of 
differing level. This latter theory may be viewed as a vast generalization of what 
went on in the author's article [61]. 

At the risk of distorting slightly the theory, I will index the shifting set of local 
conditions by a finite set of prime numbers £ which contains the set E of primes 
at which pA,e is ramified. This latter set may be obtained concretely as the set 
of primes which divide the discriminant of the number field obtaining by adjoining 
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to Q the coordinates of all points in A[£]. It is not hard to see that E contains £ and 
is contained in the union of {£} and the set of primes at which A has bad reduction. 
Indeed, this union is the set of primes E* at which pA,t°° is ramified, according 
to the well-known criterion of Neron-Ogg-Shafarevich [77] . In this perspective, the 
minimal set of conditions corresponds to the choice E = Eo, while a set of conditions 
broad enough to include pa,£°° is obtained by choosing E = E*. 

As promised, we shall now give the flavor of the conditions that one imposes 
on the lifts p of type E. Firstly, we demand that p be unramified outside E. 
Secondly, we ask that p have the same qualitative behavior at each prime p G E 
as the representation pa,£- (The imposition of this condition can be traced back 
to Gouvea's article [27].) Since I lies in E , a condition is imposed on p locally 
at the prime I — this condition requires that p be "ordinary" if A has ordinary or 
multiplicative reduction at I and that p be "flat" if A has supersingular reduction 
at £, cf. [68]. For convenience, a final (global) condition may be imposed on p, 
to the effect that the determinant of p be the composite of the £-adic cyclotomic 
character 

Xt: Gal(Q/Q)^Z| 

and the structural map Z| — > A*. This supplementary condition has the effect of 
allowing one to work with the spaces S(N) rather than with spaces of modular 
forms on groups of the form Fi(N). 

To prove that all lifts p of type E are modular, one first passes to equiva- 
lence classes with respect to the relation in which two representations with values 
in GL(2, B) are equivalent whenever they are conjugate by an element of GL(2, B) 
which maps to the identity matrix in GL(2, F^). The equivalence classes of lifts are 
called deformations — the terminology is borrowed from algebraic geometry, where 
deformation theory has been developed extensively. The idea of introducing defor- 
mation theory into the subject of Galois representations is due to Mazur [47]. As 
F. Gouvea reports in his recent survey [29], the deformation viewpoint has evolved 
considerably since [47] first appeared. In particular, a 1993 article by R. Ramakr- 
ishna [59] introduces foundational tools which Wiles requires in [92]; Ramakrishna 
shows that deformation theory can be applied to study the family of lifts which 
satisfy the local conditions to which we have been alluding. 

More precisely, the work of Mazur and Ramakrishna proves that there is a uni- 
versal deformation of type E. This is a lift 

ps : Gal(Q/Q) -> GL(2, ife) 

which is characterized by the property that for each lift 

p: Gal(Q/Q) -> GL(2,B) 

of type E there is a unique homomorphism u>: Ry. — > B of local Z^-algebras so 
that the deformation defined by p agrees with the one obtained from p E and 10. 
A common initial impression is that Ry is a relatively mysterious object whose 
existence stems from an abstract representability theorem — one comes to grips 
with it only gradually. 

Wiles seeks to compare Ry with a concrete ring T E , which he defines directly as 
a completion of a classical ring of Hecke operators. A theorem of Carayol constructs 
a Galois representation 

p E : Gal(Q/Q) -> GL(2,T E ) 
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with the property that the trace of /9^(Frob p ) is the Hecke operator T p , for all but 
finitely many primes p. One thinks of p^ as the universal modular deformation 
of type £. The problem is then to prove that p^ and p^ coincide, so that all 
deformations of type £ are modular. To come to grips with this problem, Wiles 
begins with the canonical homomorphism 

which results from the universality of It is relatively easy to show that <ps is 
surjective; the coincidence of p^ and p^ means that <ps is an isomorphism, cf. [68, 
§4-2]. 

My reaction to Wiles's 1993 announcement was astonishment that one could 
prove the modularity of Galois representations by working directly with <pj> Despite 
conjectures by Mazur [51, p. 85] and Gouvea [27, p. 108] to the effect that <ps is an 
isomorphism in the ordinary case, and Theorem 2 of [20], I was not prepared for 
the revelation that <ps could be studied fruitfully. 

12. GORENSTEIN AND COMPLETE INTERSECTION CONDITIONS 

The conjecture that <ps is an isomorphism is proved in [88, 92]. The proof relies 
on standard notions of commutative algebra which are discussed in [43] and in [41]. 
The argument of Wiles and Taylor- Wiles proceeds from the definition of as a 
completion of the ring generated by the Hecke operators T n acting on a specific 
space of classical cusp forms. In particular, is free of finite rank over Z>£. It has 
been known for some time that Hecke rings such as look special from the vantage 
point of commutative ring theory. For example, tends to be Gorenstein, which 
means that the T^-module Hom(Ts, Zig) is free of rank 1 over T^. (The Gorenstein 
property was first noted in a special case by Mazur [45, Ch. II, §15], and then 
established in ever-widening generality by others, including the author.) Chapter 2 
of [92] includes a section which summarizes and improves on the known Gorenstein 
assertions; it proves, in particular, that is Gorenstein. 

Using commutative algebra techniques, [92] presents a number of conditions 
each of which is sufficient to show that <ps is an isomorphism. As stated in the 
Introduction above, Wiles became aware while studying the problem that <ps is an 
isomorphism whenever the ring is a complete intersection ring. (This implication 
is proved from another point of view in [49].) Later, judging that it would be 
difficult to prove directly that is a complete intersection ring, Wiles focused 
on a numerical inequality [68, Th. 5.2] and showed that <ps is an isomorphism 
whenever it is satisfied. 

At the time of his 1993 Cambridge lectures, Wiles believed that he had proved 
the numerical inequality through the construction of a "geometric Euler system," 
thereby generalizing work of M. Flach [20]. Later analysis showed that the con- 
struction envisaged by Wiles was flawed. Interestingly, it is not yet clear whether 
it can be modified so as to yield an Euler system with the desired properties. At 
the minimum, one feels that this avenue of inquiry is likely to remain extremely ac- 
tive. In particular, Mazur's course notes [49] extract new information from Flach's 
original construction. 

At the time of this revision, the arguments of [88] and [92] are being studied and 
internalized by the mathematical community. Followup work is already beginning 
to appear. For example, we mentioned above that the main theorem of [92] has been 
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strengthened by a recent manuscript of F. Diamond [18]. Also, the arguments given 
in [88] and [92] have been shortened somewhat by simplifications due to G. Faltings; 
these are explained in an appendix to [88]. 

13. Toward the Taniyama-Shimura conjecture 

We conclude with a short survey of results which have been obtained by Wiles [92] , 
Taylor- Wiles [88], and Diamond [18]. Two theorems which have the flavor 

PA,e modular =>- pA,e°° modular 

are presented in [92] . In each of the theorems, the prime £ is taken to be odd, and 
the representation pA,t is required to be irreducible. 

One of the theorems (namely, [92, Th. 4.8]) has no application to Fermat's Last 
Theorem, since it does not apply to semistable elliptic curves. This theorem does 
apply to in situations where pa,i is isomorphic to the representation obtained from 
the ^-division points of a complex multiplication elliptic curve A' over Q. In these 
cases, A need not have complex multiplication itself; it is merely "linked mod £" to 
a CM curve. For a discussion of this theorem, including an explicit determination 
of the family of curves which can be linked to a fixed curve A' : see [69]. 

The theorem in [92] which applies to Fermat's Last Theorem is the one whose 
proof depends on the new work of Taylor- Wiles [88] : 

Theorem 1. Suppose that A is a semistable elliptic curve over Q. Let £ be an odd 
prime. Assume that the representation pA,e is both irreducible and modular. Then 
A is a modular elliptic curve. 

Fermat's Last Theorem may then be proved by combining the author's theorem [62] 
with the following result, which may be viewed as a highly non-obvious corollary 
of Theorem 1. 

Theorem 2. Let A be a semistable elliptic curve over Q. Then A is a modular 
elliptic curve. 

Wiles deduces Theorem 2 from Theorem 1 by an ingenious argument, which we will 
now describe. (The argument, which is presented in [92, Ch. 5], has been sketched 
in [68].) Let A be a semistable elliptic curve, and consider the representation pa,3- 
If this representation happens to be irreducible, then it is also modular, by the the 
results of Langlands and Tunnell which were cited above. Thus Theorem 1, proves 
that A is modular. 

What happens if pa,3 is reducible? In this case, we examine pa,5- If this latter 
representation is reducible as well, then Wiles shows directly that A is modular. 
Hence we can, and do, suppose that pa,5 is irreducible. Wiles shows then that 
one can find a second semistable elliptic curve A' whose mod 5 representation is 
isomorphic to that of A and whose mod 3 representation is irreducible (cf. [68, Ap- 
pendix B]). Two applications of Theorem 1 then suffice to show that A is modular. 
Indeed, applying the theorem to A' with £ = 3, we find that A' is modular. In par- 
ticular, the irreducible representation pa',5 is modular. Since this representation 
coincides with pa, 5, we may apply the theorem to A with £ = 5 to conclude that A 
is modular, as desired. 

A preprint of F. Diamond [18] generalizes Theorem 1 to the case where A is 
an elliptic curve over Q whose conductor is not divisible by £ 2 (i.e, one which is 
semistable at £): 
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Theorem 3. Let I be an odd prime number. Suppose that A is an elliptic curve 
over Q which is semistable at i. Assume that the representation pA,i is both ir- 
reducible and modular. Further, if i = 3, assume that pa,3 (Gal(Q/Q (V - 3))) is 
non-abelian. Then A is a modular elliptic curve. 

The condition concerning Gal (Q/Q (V~ 3)) occurs already in Wiles's work. How- 
ever, in the situation of Theorem 1, Wiles proves that pa,3 (Gal (Q/Q [V— 3))) is 
irreducible and non-abelian when I = 3; in other words, the assumption relative 
to Gal (Q/Q (V~ 3)) has been omitted from Theorem 1 because it may be proved 
unconditionally. 

Using a variant of the Wiles argument we have just sketched, Diamond deduces 
the following generalization of Theorem 2. 

Theorem 4. Suppose that A is an elliptic curve over Q which is semistable both 
at 3 and at 5. Then A is modular. 
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